$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa File: 323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa (raw, json) Hash identifier: PMNPnGtdrK8qAexmM54MpXfS8A2xRvuBnkTgTLjb1cE= Subject key identifier: D4:B2:90:8D:0E:75:99:13:BF:6D:4D:D2:8B:C9:4F:82:E6:AB:ED:D9 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6240ACDF13007CF03689F4ACD314707FF18A5CAA Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa Signing time: Mon 18 May 2026 09:21:41 +0000 ROA not before: Mon 18 May 2026 09:16:41 +0000 ROA not after: Mon 17 May 2027 09:21:41 +0000 asID: 396303 IP address blocks: 2602:feda:102::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:40:ac:df:13:00:7c:f0:36:89:f4:ac:d3:14:70:7f:f1:8a:5c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: May 18 09:16:41 2026 GMT Not After : May 17 09:21:41 2027 GMT Subject: CN=D4B2908D0E759913BF6D4DD28BC94F82E6ABEDD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:be:1e:56:61:d4:2d:9a:83:69:fb:87:d3: fd:fc:b9:f0:0f:03:07:80:ec:9f:9d:45:04:3e:14: 7b:e4:88:75:8d:75:60:30:90:75:29:b2:a5:f4:46: 48:da:76:d4:d1:d1:d5:4b:06:74:20:0b:3b:07:ec: d8:7d:3f:16:62:f4:20:49:06:5c:80:2f:8c:52:2a: bf:33:fc:7e:0e:22:4d:8b:c3:a4:c7:8d:4c:85:ae: 21:d9:2e:27:65:d1:b9:d7:d4:a7:1a:30:4e:a3:c6: a8:63:bf:9b:d8:bc:2d:66:69:97:4f:d5:b8:0e:7a: 10:8f:e9:13:9f:7c:90:f8:75:e6:82:e4:d6:69:0e: b8:d6:bc:84:ef:42:34:04:2e:d9:84:77:3b:46:0a: 31:ed:9b:ca:6a:8b:bb:b8:e9:8f:43:ce:96:9b:4e: 7c:cd:8c:14:29:c4:41:bc:9b:8f:5f:6f:49:06:da: 5e:f7:9c:43:2a:b5:89:53:70:cf:47:38:85:93:55: 23:29:18:69:4f:7e:63:4f:91:1c:42:29:59:26:5d: 68:fb:21:92:87:20:d0:36:e5:12:c9:9e:4f:7a:e8: f4:53:97:b6:0f:47:b6:43:2a:cc:a7:9a:ad:81:0c: 35:5b:18:2b:ce:7a:ee:85:da:f8:ce:8a:b8:43:c5: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:90:8D:0E:75:99:13:BF:6D:4D:D2:8B:C9:4F:82:E6:AB:ED:D9 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:102::/48 Signature Algorithm: sha256WithRSAEncryption 37:d6:87:86:6d:aa:dd:bd:ab:4c:31:55:60:be:eb:ec:e8:97: f7:8e:17:39:f9:9c:4c:be:4b:40:f6:3c:7b:cf:4e:94:8f:3f: 22:16:a6:27:c1:2d:d3:01:57:4c:78:8a:2e:c1:da:5f:17:7d: 65:9e:db:d9:c5:28:87:be:f1:4f:2c:91:1f:37:5a:16:34:b0: 43:72:b1:76:06:61:11:99:48:35:03:37:4c:44:42:d0:35:97: 9b:ad:12:7b:ca:ba:f3:43:51:ab:5c:ba:d2:c1:b8:97:df:70: 93:78:ad:0c:a4:58:aa:2e:98:df:89:0c:8d:0c:a2:04:69:1b: 5a:3f:18:7b:38:1e:c9:d7:ad:6e:90:a6:43:d8:f6:b7:f2:d0: a8:a1:0d:1d:24:c4:a5:08:1d:12:b3:28:3d:18:9f:9e:84:9f: ab:c4:0a:5f:e8:78:22:40:fe:3e:10:ca:1c:2d:29:bc:cb:0f: 99:e2:ea:53:52:11:7d:a5:35:09:48:13:3e:e9:9a:e4:83:13: af:3a:39:80:e8:da:54:cf:30:cb:b0:20:e6:db:30:fc:8a:9b: 14:58:ca:eb:1a:2e:36:d3:90:9e:5e:f5:cc:39:df:53:24:37: 99:0d:63:2f:92:8d:b8:ab:e8:48:1b:26:38:a1:9d:49:81:d0: 83:eb:c7:d0 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUYkCs3xMAfPA2ifSs0xRwf/GKXKowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjQxWhcNMjcwNTE3MDkyMTQx WjAzMTEwLwYDVQQDEyhENEIyOTA4RDBFNzU5OTEzQkY2RDRERDI4QkM5NEY4MkU2 QUJFREQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuki+HlZh1C2a g2n7h9P9/LnwDwMHgOyfnUUEPhR75Ih1jXVgMJB1KbKl9EZI2nbU0dHVSwZ0IAs7 B+zYfT8WYvQgSQZcgC+MUiq/M/x+DiJNi8Okx41Mha4h2S4nZdG519SnGjBOo8ao Y7+b2LwtZmmXT9W4DnoQj+kTn3yQ+HXmguTWaQ641ryE70I0BC7ZhHc7Rgox7ZvK aou7uOmPQ86Wm058zYwUKcRBvJuPX29JBtpe95xDKrWJU3DPRziFk1UjKRhpT35j T5EcQilZJl1o+yGShyDQNuUSyZ5Peuj0U5e2D0e2QyrMp5qtgQw1Wxgrznruhdr4 zoq4Q8X8FwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNSykI0OdZkTv21N0ovJT4Lm q+3ZMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzEzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzMDMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2gECMA0GCSqGSIb3DQEBCwUAA4IBAQA31oeGbardvatMMVVgvuvs 6Jf3jhc5+ZxMvktA9jx7z06Ujz8iFqYnwS3TAVdMeIouwdpfF31lntvZxSiHvvFP LJEfN1oWNLBDcrF2BmERmUg1AzdMRELQNZebrRJ7yrrzQ1GrXLrSwbiX33CTeK0M pFiqLpjfiQyNDKIEaRtaPxh7OB7J161ukKZD2Pa38tCooQ0dJMSlCB0Ssyg9GJ+e hJ+rxApf6HgiQP4+EMocLSm8yw+Z4upTUhF9pTUJSBM+6ZrkgxOvOjmA6NpUzzDL sCDm2zD8ipsUWMrrGi4205CeXvXMOd9TJDeZDWMvko24q+hIGyY4oZ1JgdCD68fQ -----END CERTIFICATE-----Generated at Sat Jun 6 08:17:49 2026 by rpki-client